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Backtracking intrusions 
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Full text available: ^pdf(185.10 Additional Information: full citation , abstract , references , cited by , 
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Analyzing intrusions today is an arduous, largely manual task because system 
administrators lack the information and tools needed to understand easily the 
sequence of steps that occurred in an attack. The goal of BackTracker is to identify 
automatically ... 
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2 LIFT: A Low-Overhead Practical Information Flow Tracking System for Detecting 
Security Attacks 

Feng Qin, Cheng Wang, Zhenmin Li, Ho-seop Kim, Yuanyuan Zhou, Youfeng Wu 
December MICRO 39: Proceedings of the 39th Annual IEEE/ ACM International 
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Full text available: ^ pdf(254.69 Additional Information: full citation , abstract , references , cited by , 
KB) index terms 

Computer security is severely threatened by software vulnerabilities. Prior work 
shows that information flow tracking (also referred to as taint analysis) is a 
promising technique to detect a wide range of security attacks. However, current 
information ... 



3 ABASH: finding bugs in bash scripts 
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June PLAS "07: Proceedings of the 2007 workshop on Programming languages and 
2007 analysis for security 
Publisher: ACM 

Full text available: pdf(262.29 A ... t . k t _ , 
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This paper describes the design and implementation of ABASH, a tool for statically 
analyzing programs written in the bash scripting language. Although it makes no 
formal guarantees against missed errors or spurious warnings (largely due to the ... 
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Multi-module vulnerability analysis of web-based applications 
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In recent years, web applications have become tremendously popular, and nowadays 
they are routinely used in security-critical environments, such as medical, financial, 
and military systems. As the use of web applications for critical services has 
increased, ... 
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5 Automatic temporal layout mechanisms revisited 

♦ M. Cecelia Buchanan, Polle T. Zellweger 
February ACM Transactions on Multimedia Computing, Communications, and 
2005 Applications (TOMCCAP), Volume 1 Issue 1 

Publisher: ACM 
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A traditional static document has a spatial layout that specifies where objects in the 
document appear. Because multimedia documents incorporate time, they also 
require a temporal layout, or schedule, that specifies when events in the document 
occur. ... 
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We present a system for identifying the semantic relationships, or semantic roles, 
filled by constituents of a sentence within a semantic frame. Given an input sentence 
and a target word and frame, the system labels constituents with either ... 
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Analyzing intrusions today is an arduous, largely manual task because system 
administrators lack the information and tools needed to understand easily the 
sequence of steps that occurred in an attack. The goal of BackTracker is to identify 
automatically ... 
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ASM: application security monitor 
. Micha Moffie, David Kaeli 
December ACM SIGARCH Computer Architecture News, Volume 33 Issue 5 
2005 
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Full text available: ^ pdf(246.65 
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Our Application Security Monitor (ASM) is a run-time monitor that dynamically 
collects execution-related data. ASM is part of a security framework that will allow us 
to explore different security policies aimed at identifying malicious behavior ... 



9 Testing Intrusion detection systems: a critique of the 1998 and 1999 DARPA 
^ intrusion detection system evaluations as performed by Lincoln Laboratory 
™ November ACM Transactions on Information and System Security (TISSEC), 
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Publisher: ACM 
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In 1998 and again in 1999, the Lincoln Laboratory of MIT conducted a comparative 
evaluation of intrusion detection systems (IDSs) developed under DARPA funding. 
While this evaluation represents a significant and monumental undertaking, there are 
a number ... 
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Analyzing intrusions today is an arduous, largely manual task because system 
administrators lack the information and tools needed to understand easily the 
sequence of steps that occurred in an attack. The goal of BackTracker is to identify 
automatically ... 
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